CVE-2022-34176: Jenkins Junit

Medium severity, CVSS 5.4. EPSS: 77.1% chance of exploitation in the next 30 days.

Jenkins JUnit Plugin 1119.va_a_5e9068da_d7 and earlier does not escape descriptions of test results, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Run/Update permission.

Affected products

  • Jenkins Junit: up to and including 1119.va_a_5e9068da_d7

Published 2022-06-23. Last modified 2026-06-17.